Helga.666.a
Description Helga.666.a
These are dangerous nonmemory resident encrypted parasitic viruses. They search for COM files, then write themselves to the end of the file. Then the viruses delete the files by using the masks:
*._* *.ms
Depending on the system time the viruses display the messages and halt the computer. "Helga.666.a" displays the message in Russian. "Helga.666.b" displays:
WARNING: ALL DATA ON NON-REMOVABLE DISK
DRIVE C: WILL BE LOST!
Proced with Format (Y/N)?y
The viruses also contain the string:
*.com
"Helga.666.a" also contains the word:
Helga
Check other viruses! Be aware! Use Antiviral Software
Synergy.288
Description Synergy.288
It is a harmless memory resident parasitic virus. It copies itself into video memory, hooks INT 10h, 21h and writes itself to the end of COM files that are executed. It contains the text string:
SynergY
Syrian Family
Description Syrian Family
These are dangerous memory resident overwriting viruses. They hook INT 21h and overwrite COM and EXE files that are executed or loaded as overlays. They display the message "Bad command or filename" before return to DOS. They contain the text strings:
"Syrian.241": Syrian Brain II
MS-DOS v4.22 Volume label for drive Z is Infected!
"Syrian.412": Syrian Brain II
"Syrian.412" searches and deletes the files
C:SYRIAN??.II?
C:*.BAT
C:*.SYS
C:*.COM
C:*.EXE
C:AUTOEXEC.*
C:CONFIG.*
and then creates the subdirectories:
C:The
C:Syrian
C:Brain
C:II
C:Has
C:Struck
|